Potential Command Injection Vulnerability In Progress Flowmon (CVE-2024-2389)

Zy Dnz@zydnz

•updated Oct 9, 2025•1•33

Detects CVE-2024-2389 detected on April 23 on Progress Flowmon. This rule detecting access to the vulnerable function parameters in specific endpoin (/service.pdfs/confluence). Attacker can be use vulnerable file and pluginPath variables directly requesting them. Howewer, to able to use those two variables lang must set to any value.